Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File: KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier: jJlq3UdqeKPeqZNFs2bLYxb/fhcfTGQsjpKM/UZBYuU=
Subject key identifier: 90:CF:F4:37:D8:9D:F3:C7:54:45:F5:9B:A6:49:A1:E2:27:FA:2A:66
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer: /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial: 01965236AF7552A8D5422EA9F8379FB3ABD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number: 0BDD
Signing time: Sun 20 Apr 2025 08:00:37 +0000
Manifest this update: Sun 20 Apr 2025 08:00:37 +0000
Manifest next update: Mon 21 Apr 2025 08:00:37 +0000
Files and hashes: 1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: 9QVWGBjF8EI39oVOzqJrzYhoxzB0XjJRnNlkd2Sop20=)
2: saiCyIGJOWPs1K9_Ew_s8P6lgY4.roa (hash: e/erISXLnvRZkY9KcM4YsZzd9BZRvEUZNZ5EqmwF75Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:af:75:52:a8:d5:42:2e:a9:f8:37:9f:b3:ab:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Validity
Not Before: Apr 20 08:00:37 2025 GMT
Not After : Apr 21 08:00:37 2025 GMT
Subject: CN=90cff437d89df3c75445f59ba649a1e227fa2a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:07:85:c5:05:34:96:1f:35:af:9b:c4:71:
37:5e:f1:d8:eb:bf:aa:5e:a4:83:76:05:21:75:42:
2c:91:f1:cf:f9:fb:d0:30:4c:60:a3:04:14:69:51:
3b:ae:fd:72:04:5a:c9:e4:47:e9:a8:6d:b2:9d:55:
2e:bc:f6:60:00:30:69:7d:db:94:23:92:08:f9:33:
c8:71:04:13:bb:36:45:4a:5b:99:1f:b6:1a:b6:ae:
c1:20:36:c4:0d:83:86:ac:3f:5d:2b:d5:2f:d7:ca:
b2:9f:05:a6:70:fa:bf:16:60:03:b6:52:e5:fd:11:
48:79:f6:ce:20:7c:f7:e1:83:86:38:ac:ea:05:25:
8d:b6:dd:56:0d:11:8f:dc:46:76:1c:8e:fc:a6:ad:
ea:3d:d7:0b:5e:97:24:3d:86:50:5e:67:dd:97:76:
bf:be:1f:50:ce:a0:c1:74:ff:85:27:b0:ea:71:38:
c7:ce:65:37:4a:36:ce:a6:77:fb:29:88:d5:b5:9f:
10:cb:15:c7:84:5c:e8:3c:ca:1f:d8:c9:93:de:1d:
c5:1b:40:cb:e1:3c:54:06:15:e6:62:1c:da:31:db:
b4:05:49:eb:ec:43:2d:67:29:56:9c:15:e4:ce:d7:
dc:94:1f:dc:54:2c:58:22:5c:10:13:f4:13:61:fe:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:F4:37:D8:9D:F3:C7:54:45:F5:9B:A6:49:A1:E2:27:FA:2A:66
X509v3 Authority Key Identifier:
keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:aa:71:33:9d:b6:ab:e4:e1:f4:a5:91:bf:57:d1:56:74:af:
ce:8e:2a:5c:b8:29:8d:71:73:55:29:21:84:70:64:6e:84:4d:
2d:45:28:45:cf:63:60:21:f8:a4:ec:21:86:60:78:ad:ef:55:
5b:d7:c5:96:85:31:6a:fb:16:49:cb:3a:34:48:2d:ed:a5:05:
ae:68:cf:1c:3f:c1:1b:49:24:e9:85:da:57:cf:d5:89:c7:40:
e9:57:48:09:05:50:df:1e:ba:0d:4d:ca:e6:27:ff:f2:4b:e5:
62:55:65:96:c4:3f:3c:f9:3b:d7:61:28:77:21:cf:fc:bc:9c:
78:ac:dc:8e:91:1f:85:b4:1a:cc:74:9d:62:f3:cc:4f:f3:33:
80:6e:d4:2a:c3:df:78:07:38:4c:0e:8f:c0:9d:a6:7a:db:55:
fb:d7:da:59:e6:69:40:e8:ec:b6:3b:a4:27:25:85:c4:f3:a3:
a5:d5:f4:30:68:16:dd:0e:ab:16:79:6e:35:2e:be:9a:cc:e0:
fe:c7:30:72:60:aa:1f:de:bb:04:96:37:34:e8:cf:a1:33:89:
9b:78:79:7d:b6:f4:36:92:fb:f3:ac:18:ce:1f:b4:b2:93:c6:
84:67:21:cd:38:36:34:40:3d:2b:55:b4:7a:90:a3:c7:68:be:
b9:69:34:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:32 2025 by rpki-client